Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/1u-gUa9URlrodTmkGb9LRYX3OVU.roa
File: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (raw, json)
Hash identifier: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=
Subject key identifier: D6:EF:A0:51:AF:54:46:5A:E8:75:39:A4:19:BF:4B:45:85:F7:39:55
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F2369080DE5E0E48A1D9DDD919986693F
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/1u-gUa9URlrodTmkGb9LRYX3OVU.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 193.222.111.0/24 maxlen: 24
193.222.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:0d:e5:e0:e4:8a:1d:9d:dd:91:99:86:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6efa051af54465ae87539a419bf4b4585f73955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:f3:43:5c:21:f0:00:bb:c3:e8:56:61:81:
95:f2:8b:4c:e3:ed:92:33:b9:2c:90:ec:0f:24:eb:
22:75:23:14:51:ba:e1:6a:d1:d7:1f:1e:29:af:50:
4f:15:e9:11:ce:07:cd:cd:51:b1:90:ae:57:0b:3e:
85:94:7b:9e:84:e8:62:a2:e3:bc:cf:23:7f:c7:4e:
3c:37:b5:62:9e:ef:62:fa:54:ef:74:17:a6:76:88:
cb:8b:77:ad:4f:f0:4d:b1:22:34:17:6e:77:3e:86:
1d:0a:50:04:12:96:72:06:87:d5:90:b0:b4:0d:fc:
9e:29:7f:e0:a3:ff:20:ba:9a:3f:b3:5f:fd:cc:a7:
c2:23:15:69:86:2b:8b:44:9a:de:7a:72:9e:18:57:
84:36:30:4f:3e:91:2c:e4:8b:e6:11:4d:c1:76:9f:
d6:d1:a9:43:72:29:84:82:a3:69:02:dc:40:10:cf:
90:8a:09:77:65:81:04:a9:94:40:28:7c:aa:3a:80:
7a:c5:37:11:05:44:5c:aa:ed:03:42:4c:02:7f:7e:
16:c3:11:40:10:3c:5a:04:f5:d5:f2:c3:84:c1:76:
0c:e0:e7:18:04:7f:b9:07:ba:da:d8:f5:e8:a5:ac:
ac:6b:8a:52:b1:67:70:22:6e:df:2a:3b:e3:2f:fa:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:A0:51:AF:54:46:5A:E8:75:39:A4:19:BF:4B:45:85:F7:39:55
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/1u-gUa9URlrodTmkGb9LRYX3OVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.111.0/24
193.222.139.0/24
Signature Algorithm: sha256WithRSAEncryption
86:20:fd:14:a3:ea:99:fd:72:d3:7e:74:9b:88:41:b0:13:79:
d9:d9:78:b7:a5:be:7d:11:02:66:b8:65:86:ca:b7:14:0d:ac:
db:82:83:9d:99:0c:1a:19:68:fb:83:b2:5c:7f:3b:b0:de:c3:
d0:73:03:b4:5e:d1:2c:e6:07:de:21:4c:dd:0a:a7:a4:36:7b:
01:53:8f:9b:53:8c:3e:c9:85:58:7e:e8:6b:b2:01:11:db:67:
78:54:71:a7:1b:d3:0a:16:a0:d1:48:f2:b2:f8:4a:c4:f3:f7:
46:b4:4a:78:29:8d:9d:7f:bf:ee:25:fe:e4:62:1b:8b:c2:c8:
b9:89:69:b3:ff:13:33:42:1f:ca:02:83:ce:97:13:4f:e9:89:
83:28:55:98:6a:6a:88:8d:c1:8a:58:10:07:9d:48:47:70:8a:
ba:0f:84:37:2d:5c:a5:a6:65:95:d1:74:d5:33:53:d4:35:84:
2c:6e:d8:7a:85:f3:e7:f4:87:d0:b0:45:fe:5a:68:f8:f0:4a:
0c:1d:5f:f4:ff:27:df:e4:29:ef:37:45:82:78:23:dd:c3:28:
b4:9e:89:5e:b7:78:80:d1:53:0b:fe:22:c2:86:8a:7c:34:07:
dc:8c:df:fc:ff:84:f6:89:ed:42:20:66:95:3f:48:f2:55:9d:
7a:2d:c2:42
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaQgN5eDkih2d3ZGZhmk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5
ZTEyMjEwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmVmYTA1MWFmNTQ0NjVhZTg3NTM5YTQxOWJmNGI0NTg1ZjczOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMDzQ1wh8AC7w+hWYYGV8otM4+2S
M7kskOwPJOsidSMUUbrhatHXHx4pr1BPFekRzgfNzVGxkK5XCz6FlHuehOhiouO8
zyN/x048N7Vinu9i+lTvdBemdojLi3etT/BNsSI0F253PoYdClAEEpZyBofVkLC0
DfyeKX/go/8gupo/s1/9zKfCIxVphiuLRJreenKeGFeENjBPPpEs5IvmEU3Bdp/W
0alDcimEgqNpAtxAEM+Qigl3ZYEEqZRAKHyqOoB6xTcRBURcqu0DQkwCf34WwxFA
EDxaBPXV8sOEwXYM4OcYBH+5B7ra2PXopaysa4pSsWdwIm7fKjvjL/rj1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNbvoFGvVEZa6HU5pBm/S0WF9zlVMB8GA1UdIwQY
MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvMXUtZ1VhOVVSbHJvZFRta0diOUxSWVgzT1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwd5vAwQA
wd6LMA0GCSqGSIb3DQEBCwUAA4IBAQCGIP0Uo+qZ/XLTfnSbiEGwE3nZ2Xi3pb59
EQJmuGWGyrcUDazbgoOdmQwaGWj7g7Jcfzuw3sPQcwO0XtEs5gfeIUzdCqekNnsB
U4+bU4w+yYVYfuhrsgER22d4VHGnG9MKFqDRSPKy+ErE8/dGtEp4KY2df7/uJf7k
YhuLwsi5iWmz/xMzQh/KAoPOlxNP6YmDKFWYamqIjcGKWBAHnUhHcIq6D4Q3LVyl
pmWV0XTVM1PUNYQsbth6hfPn9IfQsEX+Wmj48EoMHV/0/yff5CnvN0WCeCPdwyi0
nolet3iA0VML/iLChop8NAfcjN/8/4T2ie1CIGaVP0jyVZ16LcJC
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:14:35 2026 by rpki-client